This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft File: BwkPumY7Byu1TMfUnoigOAN0y24.mft (raw, json) Hash identifier: g/Cs5bklOKHXzUz4FUlrWmN7vyKSLG2VUllz5Ns4XoM= Subject key identifier: 34:EC:43:5F:9E:3D:1C:12:82:9D:1D:72:50:24:99:26:61:FD:0A:1D Authority key identifier: 07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E Certificate issuer: /CN=07090fba663b072bb54cc7d49e88a0380374cb6e Certificate serial: 019B2D0C4F3A73E9D881621C51DD2E7DCF20 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft Manifest number: 177E Signing time: Wed 17 Dec 2025 16:02:19 +0000 Manifest this update: Wed 17 Dec 2025 16:02:19 +0000 Manifest next update: Thu 18 Dec 2025 16:02:19 +0000 Files and hashes: 1: BwkPumY7Byu1TMfUnoigOAN0y24.crl (hash: w+qkWXwHJGKitcniPpS07k7VKAbp491LGErAOJAopOA=) 2: NQNN2zI--5W9phAw1FPsrLGEYwA.roa (hash: vTr80Rx2MWq5UoQZbNWzT5PuHgBwID0hr0ao7hRy9dI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 18 Dec 2025 10:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:2d:0c:4f:3a:73:e9:d8:81:62:1c:51:dd:2e:7d:cf:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07090fba663b072bb54cc7d49e88a0380374cb6e Validity Not Before: Dec 17 16:02:19 2025 GMT Not After : Dec 18 16:02:19 2025 GMT Subject: CN=34ec435f9e3d1c12829d1d725024992661fd0a1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:dd:13:b0:eb:f9:cc:5e:b5:c4:4f:f6:01:cd: d6:11:64:76:6d:42:62:11:3a:c7:11:17:a5:fd:ce: 4b:83:82:c2:df:39:ad:a2:d7:b2:87:7c:bc:04:8d: 7a:35:df:de:0b:b8:15:6b:f3:d2:a0:6b:67:87:a7: 4b:12:1f:56:c8:72:29:9a:7f:59:69:04:57:36:dd: 4e:47:81:d8:46:36:b2:b5:2f:02:89:e6:1c:74:75: a3:27:cf:2e:57:2a:eb:9e:c9:58:a4:64:ad:22:6d: d9:12:b3:95:12:0a:7e:11:06:c6:9b:09:d2:53:5a: 50:68:fa:41:bc:8e:16:59:fb:2d:4b:db:92:fd:28: ae:9b:5f:f0:5b:59:6a:e9:08:42:76:36:77:49:c9: c0:d6:d9:51:71:10:1e:a0:c7:05:4d:db:fc:22:11: 4e:36:d2:d5:3b:81:d3:3e:bd:8f:5e:66:64:60:d4: 7b:5a:7f:7c:40:bc:37:dc:31:06:9c:ef:9c:eb:5e: c8:2c:fe:1d:a5:62:ae:67:72:0b:93:e0:96:0e:2a: 45:06:5b:63:4f:80:a1:29:5c:b2:09:c2:0d:89:0e: 3f:c6:45:c0:fb:15:72:02:cb:2b:ee:9b:37:80:ac: 08:5b:fd:fb:83:5c:a9:2a:83:93:86:84:88:b1:ce: ca:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:EC:43:5F:9E:3D:1C:12:82:9D:1D:72:50:24:99:26:61:FD:0A:1D X509v3 Authority Key Identifier: keyid:07:09:0F:BA:66:3B:07:2B:B5:4C:C7:D4:9E:88:A0:38:03:74:CB:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BwkPumY7Byu1TMfUnoigOAN0y24.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a07342-1742-41a1-8bc7-01a28a76ccf4/1/BwkPumY7Byu1TMfUnoigOAN0y24.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:49:2a:1b:a2:56:a6:3a:e8:37:d3:c8:31:38:90:cc:5a:a3: 8d:21:05:b3:b7:76:e8:a8:42:86:92:7b:d1:a8:48:1a:ac:45: 94:3b:15:8e:2c:21:63:22:c0:2c:b7:47:fd:4f:a1:a5:4c:ed: 07:b7:c7:5a:7f:26:52:de:2c:07:4c:b6:e1:5d:3b:e1:af:b2: 69:26:74:da:2f:5a:f9:a8:eb:ed:9a:cf:8b:e3:09:9a:37:b2: 9e:b3:81:28:aa:96:37:94:88:0b:ab:ab:fd:c4:0d:db:d8:fa: ae:55:c0:54:1b:1f:6d:70:3f:32:cc:0b:2a:6f:e4:9b:58:33: 17:a3:ef:c1:48:bd:60:ad:0d:ac:1a:c1:78:65:83:7f:e9:2b: 94:b2:6d:7d:18:8b:02:14:c2:0e:4d:5e:d1:9e:51:48:c4:e7: 7f:1a:d2:b6:ab:3d:2e:a4:19:a8:0b:2e:90:d4:96:90:d6:0e: 05:26:c8:27:32:00:a4:8c:d2:1a:bb:d8:ff:fa:3a:56:8f:d0: 59:c9:f2:44:d5:db:6b:e0:6b:6a:09:68:c4:4a:14:54:63:92: 84:37:9f:4c:9a:92:3f:2d:f4:77:3f:7e:41:1c:d7:df:2c:0b: fc:ee:26:01:a4:f6:73:11:e0:b3:0c:5d:93:ba:db:66:26:ae: 82:8c:fb:c2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZstDE86c+nYgWIcUd0ufc8gMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA3MDkwZmJhNjYzYjA3MmJiNTRjYzdkNDllODhhMDM4MDM3 NGNiNmUwHhcNMjUxMjE3MTYwMjE5WhcNMjUxMjE4MTYwMjE5WjAzMTEwLwYDVQQD EygzNGVjNDM1ZjllM2QxYzEyODI5ZDFkNzI1MDI0OTkyNjYxZmQwYTFkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqN0TsOv5zF61xE/2Ac3WEWR2bUJi ETrHERel/c5Lg4LC3zmtoteyh3y8BI16Nd/eC7gVa/PSoGtnh6dLEh9WyHIpmn9Z aQRXNt1OR4HYRjaytS8CieYcdHWjJ88uVyrrnslYpGStIm3ZErOVEgp+EQbGmwnS U1pQaPpBvI4WWfstS9uS/Sium1/wW1lq6QhCdjZ3ScnA1tlRcRAeoMcFTdv8IhFO NtLVO4HTPr2PXmZkYNR7Wn98QLw33DEGnO+c617ILP4dpWKuZ3ILk+CWDipFBltj T4ChKVyyCcINiQ4/xkXA+xVyAssr7ps3gKwIW/37g1ypKoOThoSIsc7KJwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDTsQ1+ePRwSgp0dclAkmSZh/QodMB8GA1UdIwQY MBaAFAcJD7pmOwcrtUzH1J6IoDgDdMtuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQndrUHVtWTdCeXUxVE1mVW5vaWdPQU4weTI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hMDczNDItMTc0Mi00MWExLThiYzct MDFhMjhhNzZjY2Y0LzEvQndrUHVtWTdCeXUxVE1mVW5vaWdPQU4weTI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hMDczNDItMTc0Mi00MWExLThiYzctMDFhMjhhNzZjY2Y0 LzEvQndrUHVtWTdCeXUxVE1mVW5vaWdPQU4weTI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT0kqG6JW pjroN9PIMTiQzFqjjSEFs7d26KhChpJ70ahIGqxFlDsVjiwhYyLALLdH/U+hpUzt B7fHWn8mUt4sB0y24V074a+yaSZ02i9a+ajr7ZrPi+MJmjeynrOBKKqWN5SIC6ur /cQN29j6rlXAVBsfbXA/MswLKm/km1gzF6PvwUi9YK0NrBrBeGWDf+krlLJtfRiL AhTCDk1e0Z5RSMTnfxrStqs9LqQZqAsukNSWkNYOBSbIJzIApIzSGrvY//o6Vo/Q WcnyRNXba+BragloxEoUVGOShDefTJqSPy30dz9+QRzX3ywL/O4mAaT2cxHgswxd k7rbZiaugoz7wg== -----END CERTIFICATE-----Generated at Wed Dec 17 19:40:11 2025 by rpki-client